windows instant user logoff on login

Posted on 2009-04-15
Last Modified: 2012-05-06
I have a computer badly infected with viruses. I removed the viruses by slaving the drive to another machine and running several virus scanners. Unfortunately now when I load windows, every time I click on any user profile, I am instantly logged back off. So it makes the log on noise, and then half a second later it boots me back to the log on screen. I have tried a repair install as well as several microsoft KB articles related to this problem with no change.

Any ideas?
Question by:zoogelsnof
    LVL 26

    Expert Comment

    Do you get any error messages at all? If so, what are they? Can you post a HijackThis log for the drive?
    LVL 66

    Accepted Solution

    The userinit value is possibly corrupted in the registry....

    How to edit the registry offline using BartPE boot CD ?

    Just follow the directions in the article, about loading the SYSTEM hive, and navigate to the following key

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    Look for the followingvalue....

    Userinit=C:\Windows\system32\userinit.exe, <~~~~ Should look EXACTLY like this, including the comma...

    You can do it either way, with BartPE, or UBCD4Win. Or simply slave this drive into another workstation....

    What is the Ultimate Boot CD for Windows?

    Bart's Preinstalled Environment (BartPE) bootable live windows CD/DVD
    LVL 66

    Expert Comment

    Also, there could be a possibilty that the userinit.exe is not the proper one, and you can extract a good copy from the CD..... It should be 24-26kb, and signed from MS......

    Rename the existing one, to have a backup of it....

    rename c:\windows\system32\userinit.exe to c:\windows\system32\userinit.old


    Extract a copy from the CD, or I386 directory.
    If the CDRom is D....

    expand d:\i386\userinit.ex__ c:\windows\system32\userinit.exe
    LVL 66

    Expert Comment

    This can also be done remotely from another PC if it is networked, using explorer and Remote Registry....

    Author Closing Comment

    Perfect! got it, thanks!
    LVL 66

    Expert Comment

    Glad your fixed!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Are you unable to synchronize your OST (Offline Storage Table) file with Microsoft Exchange Server? Is your OST file exceeding 2 GB size limit? In Microsoft Outlook 2002 and earlier versions, there is a 2 GB size limit for the OST file. If the file …
    If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now